{
  security.acme = {
    acceptTerms = true;
    defaults.dnsResolver = "8.8.8.8:53";
    defaults.group = "acme";
  };
}
